NetSight
medium6.5

CVE-2020-4320

IBM MQ Appliance and IBM MQ AMQP Channels 8.0, 9.0 LTS, 9.1 LTS, and 9.1 CD do not correctly block or allow clients based on the certificate distinguished name…

Impact

IBM MQ Appliance and IBM MQ AMQP Channels 8.0, 9.0 LTS, 9.1 LTS, and 9.1 CD do not correctly block or allow clients based on the certificate distinguished name SSLPEER setting. IBM X-Force ID: 177403.

Affected products

VendorProductAffected versions
IbmMq
from 8.0.0.0 before 8.0.0.15
from 9.0.0.0 before 9.0.0.10
from 9.1.0 before 9.1.5
from 9.1.0.0 before 9.1.0.5

Weakness classification

References